Issue Wordpress messages blocked!

[elitechsavvy]

Hello folks,

Where do you check why Plesk server is not sending messages besides ports are opened on firewall?

Thank you for your insights.

Eli

 

[IgorG]

Any details from maillog at least?

 

[elitechsavvy]

Learning how to navigate but seems mail-log its a membership based service. Not. Sure where they are. Any hints?

 

[IgorG]

Any hints?

Plesk for Linux services logs and configuration files

Applicable to: Plesk for Linux Question Where to find Plesk for Linux services logs and configuration files? Answer This article's sole purpose is to provide information regarding the services t...

support.plesk.com

 

[elitechsavvy]

Feb 3 21:47:44 localhost postfix-local[17360]: postfix-local: from=MAILER-DAEMON, to=eacevedo@aitcloudns.com, dirname=/var/qmail/mailnames
Feb 3 21:47:44 localhost postfix-local[17360]: cannot chdir to mailname dir eacevedo: No such file or directory
Feb 3 21:47:44 localhost postfix-local[17360]: Unknown user: eacevedo@aitcloudns.com
Feb 3 21:47:44 localhost postfix/pipe[17358]: 1525267CE: to=<eacevedo@aitcloudns.com>, relay=plesk_virtual, delay=0.05, delays=0/0.01/0/0.03, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
Feb 3 21:47:44 localhost postfix/qmgr[128801]: 1525267CE: removed
Feb 3 21:51:30 localhost dovecot_authdb_plesk[46661]: No such user 'info@eliacevedo.com' in mail authorization database
Feb 3 21:51:32 localhost dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<info@eliacevedo.com>, method=PLAIN, rip=94.102.57.241, lip=108.175.15.63, session=<k1+F9LedztteZjnx>
Feb 3 22:01:37 localhost postfix/qmgr[128801]: B3E9967C5: from=<eacevedo@aitcloudns.com>, size=20031, nrcpt=1 (queue active)
Feb 3 22:01:37 localhost postfix/qmgr[128801]: 46CA4B6785: from=<eacevedo@aitcloudns.com>, size=20933, nrcpt=1 (queue active)
Feb 3 22:01:37 localhost postfix/qmgr[128801]: 5666967C4: from=<eacevedo@aitcloudns.com>, size=637, nrcpt=1 (queue active)
Feb 3 22:01:37 localhost postfix/smtp[106680]: B3E9967C5: host smtp.secureserver.net[68.178.213.37] refused to talk to me: 554 p3plibsmtp02-02.prod.phx3.secureserver.net CMGW IB105. Connection refused. 108.175.15.63 is listed on the Exploits Block List (XBL) <http://www.spamhaus.org/query/ip/108.175.15.63> Please visit XBL - Exploit and Botnet Filter - The Spamhaus Project for more information.
Feb 3 22:01:37 localhost postfix/smtp[106681]: 46CA4B6785: host smtp.secureserver.net[68.178.213.203] refused to talk to me: 554 p3plibsmtp03-08.prod.phx3.secureserver.net CMGW IB105. Connection refused. 108.175.15.63 is listed on the Exploits Block List (XBL) <http://www.spamhaus.org/query/ip/108.175.15.63> Please visit XBL - Exploit and Botnet Filter - The Spamhaus Project for more information.
Feb 3 22:01:37 localhost postfix/smtp[106682]: 5666967C4: host smtp.secureserver.net[68.178.213.37] refused to talk to me: 554 p3plibsmtp02-10.prod.phx3.secureserver.net CMGW IB105. Connection refused. 108.175.15.63 is listed on the Exploits Block List (XBL) <http://www.spamhaus.org/query/ip/108.175.15.63> Please visit XBL - Exploit and Botnet Filter - The Spamhaus Project for more information.

 

[IgorG]

As you can see from log your server IP 108.175.15.63 is blacklisted.
You have to contact your Service Provider, Spamhouse, etc.

 

[elitechsavvy]

Yes, I have already submit the removal from CBL.

108.175.15.63 is listed in the XBL, because it appears in:

• CBL Lookup

The odd part is that in some other WordPress plugins emails are sent to the user but not to Administrators.

 

[elitechsavvy]

Here is the updated log:

Feb 3 22:47:20 localhost journal: plesk sendmail[98433]: SKIP during call 'check-quota' handler
Feb 3 22:47:20 localhost postfix/pickup[67391]: 82CEC67C2: uid=10000 from=<eacevedo@aitcloudns.com>
Feb 3 22:47:20 localhost postfix/cleanup[98164]: 82CEC67C2: message-id=<2d17a5d0f1fe805ad3108553de2700c3@asesoriasit.com>
Feb 3 22:47:20 localhost postfix/qmgr[128801]: 82CEC67C2: from=<eacevedo@aitcloudns.com>, size=826, nrcpt=1 (queue active)
Feb 3 22:47:20 localhost postfix/local[98168]: 82CEC67C2: to=<eacevedo@asesoriasit.com>, relay=local, delay=0.03, delays=0.02/0/0/0, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 3 22:47:20 localhost postfix/qmgr[128801]: 82CEC67C2: removed
Feb 3 22:47:20 localhost check-quota[98441]: Starting the check-quota filter...
Feb 3 22:47:20 localhost journal: plesk sendmail[98440]: handlers_stderr: SKIP
Feb 3 22:47:20 localhost journal: plesk sendmail[98440]: SKIP during call 'check-quota' handler
Feb 3 22:47:20 localhost postfix/pickup[67391]: 986F567C2: uid=10000 from=<eacevedo@aitcloudns.com>
Feb 3 22:47:20 localhost postfix/cleanup[98164]: 986F567C2: message-id=<9f0c0719634ad17205dac660a3c634f9@asesoriasit.com>
Feb 3 22:47:20 localhost postfix/qmgr[128801]: 986F567C2: from=<eacevedo@aitcloudns.com>, size=19981, nrcpt=1 (queue active)
Feb 3 22:47:20 localhost check-quota[98448]: Starting the check-quota filter...
Feb 3 22:47:20 localhost journal: plesk sendmail[98447]: handlers_stderr: SKIP
Feb 3 22:47:20 localhost journal: plesk sendmail[98447]: SKIP during call 'check-quota' handler
Feb 3 22:47:20 localhost postfix-local[98449]: postfix-local: from=eacevedo@aitcloudns.com, to=eli@aitb2b.com, dirname=/var/qmail/mailnames
Feb 3 22:47:20 localhost postfix/pickup[67391]: A9A344D4C3: uid=10000 from=<eacevedo@aitcloudns.com>
Feb 3 22:47:20 localhost postfix/cleanup[98164]: A9A344D4C3: message-id=<b6455c6a4e93b419b2f3493d4f745127@asesoriasit.com>
Feb 3 22:47:20 localhost postfix-local[98449]: cannot chdir to mailname dir eli: No such file or directory
Feb 3 22:47:20 localhost postfix-local[98449]: Unknown user: eli@aitb2b.com
Feb 3 22:47:20 localhost postfix/qmgr[128801]: A9A344D4C3: from=<eacevedo@aitcloudns.com>, size=19973, nrcpt=1 (queue active)
Feb 3 22:47:20 localhost postfix/trivial-rewrite[98165]: warning: do not list domain asesoriasit.com in BOTH mydestination and virtual_mailbox_domains
Feb 3 22:47:20 localhost postfix/pipe[98171]: 986F567C2: to=<eli@aitb2b.com>, relay=plesk_virtual, delay=0.1, delays=0.03/0.01/0/0.06, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
Feb 3 22:47:20 localhost postfix/qmgr[128801]: 986F567C2: removed
Feb 3 22:47:20 localhost postfix/local[98168]: A9A344D4C3: to=<eacevedo@asesoriasit.com>, relay=local, delay=0.04, delays=0.03/0/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 3 22:47:20 localhost postfix/qmgr[128801]: A9A344D4C3: removed

 

[G J Piper]

If it is repeating CBL blacklisting, read this issue that may also apply to you:

Plesk 12.5 Email Server listed in CBL -- Shared Hosting Question

I have Plesk 12.5.30 running CentOS6.7 with Dovecot and Postfix as the mail server, and it is only one month old. I found my IP was just listed today in the http://www.abuseat.org CBL. I "delisted" it for now, but I fear it getting listed again. I got this message, and am wondering what server...

talk.plesk.com

 

[elitechsavvy]

I have had the second option and cbl

108.175.15.63 is not listed in the SBL
108.175.15.63 is not listed in the PBL
108.175.15.63 is not listed in the XBL

What other setting am I missing??

 

[elitechsavvy]

I have contacted my provider, this is a cloud server.

I have checked open ports and all seems good, even with the plesk firewall:


PORT STATE SERVICE
22/tcp open ssh
25/tcp open smtp
80/tcp open http
110/tcp open pop3
443/tcp open https
465/tcp open smtps
587/tcp open submission
993/tcp open imaps
995/tcp open pop3s
8443/tcp open https-alt

 

[elitechsavvy]

I have spoke with my provider and we have made some test:
# cat /etc/resolv.conf
; generated by /usr/sbin/dhclient-script
nameserver 2001:8d8:fe:53:72ec::1
nameserver 2001:8d8:fe:53:72ec::2

Added in google resolvers at the top.

# cat /etc/resolv.conf
; generated by /usr/sbin/dhclient-script
nameserver 8.8.8.8
nameserver 8.8.4.4
nameserver 2001:8d8:fe:53:72ec::1
nameserver 2001:8d8:fe:53:72ec::2

Server seems fine, pointing to something on Plesk.

 

[G J Piper]

I have had the second option and cbl

You need to read further down in that thread I sent you. You do not want the second option. You want the first option that says "Send from domain IP addresses." only. Then you can apply to have your listing fixed at the CBL. CBL lists anyone who has more than one domain announced by their SMTP server on one IP address.

 

[elitechsavvy]

Thank you G, for your response.

I have had made the update, and restart the Plesk server.

Going for some testing.